JP2007286821A - Information sharing system and information sharing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information sharing system and information sharing method, capable of sharing information while ensuring high security by sharing only information provided from a specific device. <P>SOLUTION: In the information sharing system, a gateway device 21 of an information providing destination network requests an IP address of a client PC 13 of an information providing source network in a state where voice session is established by conversation service between IP phones, and when disclosure permission of IP address is reported, IP addresses of a print server 24 and a printer 23 are reported to the client PC 13, and the IP address of the client PC 13 is registered in the print server 24. The client PC 13 transmits print data to the reported IP address of the print server 24, and the print server 24 which received the data performs printing-out by determining whether the IP address of the transmitting source of the print data is a registered IP address or not. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an information sharing system and gateway apparatus and method for sharing information between mutual networks, and in particular, information sharing that enables highly secure information sharing by receiving only digital information from a specific destination. The present invention relates to a system and a gateway device.

  Generally, when information such as an electronic document is shared by a plurality of users, information sharing can be performed by providing a device that can be commonly accessed by the sharing user, such as a document management server. In addition, when providing information to an unspecified number of people, it is possible to provide information to a third party by starting up a Web server that provides Web content.

  Among them, when information is shared between specific users, it is common to share the information by simply transmitting the information using an e-mail function or a P2P (Peer to Peer) function.

  The information provider (user) who received the information can share the information by referring to the provided content, but when making an inquiry about the content of the provided information to the information provider, For example, inquiries can be made using methods such as telephone, facsimile, electronic mail, and bulletin board. In this case, from the perspective of the provider who provided the information, if a specific information is provided, it can be easily determined that the inquiry is for that information. If so, it takes time to identify the information to be inquired.

  In response to the inquiry, the information provider may provide further information to the user who has made the inquiry as necessary. In such a case, in order to provide information immediately, it is necessary to constantly monitor the inquiry and to prepare the information to be provided in advance.

  As an example of a technology for providing information, there is a conventional technology that can provide a printing service for outputting information to a printer installed at the provider, where the information provider and the provider are at a long distance. 1 is disclosed.

  In the prior art disclosed in Patent Document 1, a proxy device that can communicate with a print server that cannot pass through a firewall by using IPP (Internet Printing Protocol) is provided, and a server site for the print server is established in the proxy device. Thus, the print server is regarded as an IPP server published on the Internet, and a print service request and a response can be exchanged.

  By using such a technology, it becomes possible to easily share necessary information between the information provider and the provider. However, in recent years, threats (risks) have been generated by exploiting rapidly developed technologies. It is also true that there is a need to protect the shared digital information from these threats.

Among such threats, there are DoS (Denial of Service) attacks, source IP address spoofing, and the like, and there is a possibility that unnecessary information is sent unrestricted by these threats.
JP 2003-58459 A

  However, in the prior art disclosed in Patent Document 1, a proxy device is provided so that communication can be performed across a firewall. However, it is necessary to know detailed information of the information providing destination printer in advance. There is a problem that information cannot be shared with a large number of specific providers.

  Further, in this conventional technique, since it is necessary to newly provide a proxy device, it takes a lot of time and a large amount of cost to construct the system.

  Furthermore, it is necessary to take measures in advance to protect against threats such as DoS (Denial of Service) attacks and source IP address spoofing.

  Accordingly, an object of the present invention is to provide an information sharing system, a gateway device, and an information sharing method that can share information while ensuring high security by sharing only information provided from a specific device. And

  In order to achieve the above object, the invention of claim 1 establishes a call session between telephones provided at each point, and the gateway device at the point where the call session is established digitally communicates digital information. In a shared information sharing system, requesting means for requesting the network identification information of the management apparatus to a destination having a management apparatus that manages the digital information, and the management apparatus from the destination requested by the requesting means Registration means for receiving the network identification information and registering the network identification information in association with the network identification information of the gateway apparatus of the counterpart having the management apparatus, and the counterpart that requested the network identification information by the request means Accepting a digital information processing request from a management device And confirmation means for confirming whether the network identification information of the request source included in the processing request accepted by the acceptance means matches the network identification information of the management apparatus registered by the registration means, and the confirmation means The digital information is shared between the points when it is confirmed that it matches the registered network identification information.

  Further, the invention of claim 2 establishes a call session between telephones provided at each point, and the gateway device at the point where the call session is established digitally receives digital information from the other party, In the information sharing system in which the digital information is shared by forming an image with an image forming apparatus, the gateway apparatus transmits network identification information of the management apparatus to a destination at a point having a management apparatus that manages the digital information. Requesting means for requesting, registration means for registering the network identification information of the management apparatus received from the counterpart by the request by the request means in association with the network identification information of the gateway apparatus of the counterpart, and network identification information by the request means From the management device of the other party that made the request. A reception unit that receives an image formation request for the total information, and checks whether the network identification information of the request source included in the image formation request received by the reception unit matches the network identification information of the management apparatus registered by the registration unit A confirmation unit; and a transfer unit that transfers the digital information to the image forming apparatus when it is confirmed that the network identification information registered by the confirmation unit is matched. An image of the digital information transferred by the means is formed.

  Further, the invention of claim 3 is the invention according to claim 1 or 2, wherein the confirmation of the request source by the confirmation unit using the network identification information of the management apparatus registered by the registration unit is set to valid and invalid. An invalid setting unit, and the confirmation unit includes the network identification information registered by the registration unit when the network identification information of the processing request received by the receiving unit is set to be valid by the setting unit; It is characterized by checking whether it matches.

  The invention of claim 4 is characterized in that in the invention of claim 1 or 2, it further comprises erasure means for erasing the network identification information of the management apparatus registered by the registration means together with disconnection of the call session. To do.

  According to a fifth aspect of the present invention, in the invention according to any one of the first to third aspects, when the call session using the telephone is disconnected, the network identification information of the management device registered by the registration unit is obtained by the setting unit. It is set to be invalid.

  According to a sixth aspect of the present invention, in the first aspect of the present invention, a call session is established between the telephones provided at each point, and the gateway devices at the point where the call session is established perform digital communication with each other. In the information sharing method for sharing information, the gateway device requests network identification information of the management device from the point having the management device that manages the digital information by the request device, and the request device requests Receiving the network identification information of the management device from the counterpart, registering the network identification information in association with the network identification information of the gateway device of the counterpart having the management device, and registering the network identification information by the request means; The digital information is received from the management apparatus of the other party that made the request. The management request is accepted by the accepting means, and it is confirmed by the confirming means whether the network identification information of the request source included in the processing request accepted by the accepting means matches the network identification information of the management apparatus registered by the registering means, The digital information is shared between points when it is confirmed by the confirmation means that the network identification information is registered.

  According to the present invention, an IP address of a client PC that manages digital information and a printer that prints the digital information and an IP address of a print server are shared between nodes of a network in which a voice session between IP telephones is established. . After that, when the request source IP address indicated in the print data received by the printer server is the same as the IP address of the client PC shared previously, the digital information is printed out from the printer. It is possible to print out only the information from the other party's network, and it is no longer necessary to print out unauthorized information from a third party, so it is possible to share information with high security. There is an effect.

  In addition, since the data session is established together with the voice session and the data communication is performed by the data session, the necessary information can be easily shared with each other without the need for information sharing. Also has the effect of becoming.

  Hereinafter, an embodiment of an information sharing system, a gateway device, and an information sharing method according to the present invention will be described in detail with reference to the accompanying drawings.

  FIG. 1 is a system configuration diagram configured by applying an information sharing system, a gateway device, and an information sharing method according to the present invention.

  In FIG. 1, this information sharing system shares predetermined digital information with a communication partner of the communication service by using a communication service represented by broadband communication such as voice communication using a communication line, video or chat. This is a system that realizes information sharing with high security by receiving information only from a communication partner through the communication service.

  Furthermore, an information sharing system that ensures higher safety is provided by disabling information sharing with the communication partner by disconnecting from the communication partner of the communication service.

  As voice communication at this time, for example, there is an IP phone using VoIP (Voice over Internet Protocol) technology, and as broadband communication, there are real-time video distribution and video chat using a network camera.

  Information sharing is performed with a communication partner using such a communication service.

  In the following, an example in which “IP phone” is used as a communication service will be described.

  This information sharing system provides an information provider network 10 that accepts a call by an IP phone and provides digital information, and provides information to receive digital information by sending a call to the information provider network 10 using an IP phone. The information providing destination network 20 composed of the destination network 20 and connected to the information providing source network 10 is composed of one or more network segments.

  The information providing source network 10 and the information providing destination network 20 are connected by a communication line. For example, in addition to Internet connection, a public line such as a VPN (Virtual Private Network) or a wide area Ethernet (registered trademark) service or a dedicated line is used. Connect using wires. Of course, not only these WAN (Wide Area Network) connections but also connections within a closed network using LAN cables may be used. In this case, it is indicated that the information providing source network 10 and the information providing destination network 20 are in the same network (within the LAN).

  The information providing source network 10 includes a gateway device 11, an IP phone 12, and a client PC 13, and the information providing destination network 20 includes a gateway device 21, an IP phone 22, a printer 23, and a print server 24. Is done. In this information sharing system configured by connecting these networks, the digital information stored in the storage area of the client PC 13 installed in the information providing source network 10 is printed out by the printer 23 installed in the information providing destination network 20. To share information between each other.

  Each device belonging to each network is a node connected by a LAN cable and can communicate with each other.

  Hereinafter, each node constituting the network will be described.

  First, in the information providing source network 10, the gateway device 11 is configured by a router or a layer 3 switch, and is installed at an edge portion of the network and has a function of bridging data communication between the information providing source network 10 and an external network. .

  The gateway device 11 holds route information to nodes constituting the information providing source network 10, and refers to the destination information (IP address, port number, MAC address, etc.) of the received data. Transfer data based on information. That is, the information providing source network 10 shown in FIG. 1 is configured by nodes of the IP telephone 12 and the client PC 13, and transfers voice packets and the like to the IP telephone 12 and transfers other packets to the client PC 13.

  In addition, the gateway device 11 receives an IP address notification request of the client PC 13 from the external network, and confirms whether it is appropriate to disclose the IP address of the client PC 13 by receiving this notification request. I do. In this disclosure confirmation processing, it is determined whether or not the information sharing system can be used while determining whether or not it is an appropriate partner by identifying the transmission source of the IP address notification request. If disclosure is possible through the disclosure confirmation process, an “accept response” indicating that the IP address can be disclosed is sent to the notification request source, and conversely, if it cannot be disclosed, a “reject response” is sent. .

  The IP address of the client PC 13 that receives the IP address of the device that processes the digital information shared from the destination network that has transmitted the permission response, for example, the device such as the printer 23 or the print server 24, and manages it as route information in return. Forward. The received IP addresses of the printer 23 and the print server 24 are transferred to the client PC 13 that manages digital information shared between the mutual networks.

  The IP telephone 12 performs voice communication by packetizing voice, establishing a voice session with the IP telephone 22 of the other party's network (information providing destination network 20), and communicating with the other party.

  The client PC 13 manages the digital information shared between the mutual networks, and issues a print request to the partner network where the data session has been established. The IP address specified as the destination information of the print request is the IP address notified when the data session is established, and the IP address specified as the source information is an IP address set in advance in the client PC 13.

  Next, in the information providing destination network 20, the gateway device 21 holds the route information to the nodes constituting the network like the gateway device 11 of the information providing source network 10, and transfers data based on the route information.

  Further, a call is made by receiving a voice packet from the IP telephone 22 in the information providing destination network 20 and transferring the voice packet to the information providing source network 10. During this call, the operation status is confirmed by transferring a status confirmation request to the print server 24. When the operation state of the print server 24 can be confirmed and the voice session is established by the destination IP telephone 12 responding to the call, the network gateway device 11 in which the voice session is established is then digitally transmitted. Requests the IP address of the client PC 13 that manages the information.

  In response to this request, when an authorization response that can disclose the IP address of the client PC 13 is received, the IP addresses of the print server 24 and the printer 23 that have further confirmed the operation are notified. As a result, the received IP address of the client PC 13 is transferred to the print server 24.

  By these processes, a data session is established between networks in which voice sessions are established between IP telephones, and mutual notification of digital information becomes possible.

  When a print request is received in a state where the data session is established, the print request is transferred to the print server 24 indicated as the destination information of the print request.

  The IP telephone set 22 makes a call by packetizing the voice and transmitting the call to the other party's network, and a voice session is established by receiving a response to the call. Incidentally, H.264 standardized by ITU-T (International Telecommunication Union) etc. H.323, MGCP (Media Gateway Control Protocol), H.323. 248, a voice session between IP telephones is established by using a call control protocol such as SIP (Session Initiation Protocol).

  The printer 23 is an example of an image forming apparatus that shares information between mutual networks by printing out digital information. Further, based on a print request from the print server 24, print processing on a print medium is performed.

  The print server 24 controls printing of a print request from the client PC 13 of the partner information provider network 10. An operation check of the printer 23 for performing printing in response to the print request is performed at any time. Further, based on the status confirmation request from the gateway device 21, when the printer 23 is operating normally together with the operation status of the printer 23, a status confirmation response is returned to the gateway device 21.

  Further, the IP address of the client PC 13 of the information providing source network 10 is received by communication between the gateway devices (11, 21), and is registered and managed as an IP address for the gateway device 11 of the other party. An example of this management state is shown in FIG.

  When the print server 24 receives the print request, it confirms whether the IP address designated as the source IP address of the print request is registered in the managed IP address. If registered, a print request is accepted and printed out to the printer 23.

  In the print server 24, the voice session between the IP telephones is released, and at the same time, the disconnection process is performed to delete the registered IP address. Instead of deleting the registered IP address, it may be configured to be temporarily invalidated and referred to when a voice session is established again. FIG. 4 shows the registration state of the IP address in the former case, and FIG. 10 shows the registration state of the IP address in the latter case.

  With the configuration as described above, it becomes possible to print out only a print request using the IP address registered in the print server 24 as a transmission source IP address.

  As a result, data can be received only from a specific device on the other party's network in a state where a voice session is established, and information sharing with high safety is possible.

  FIG. 2 is a diagram showing a modification of the configuration shown in FIG.

  In FIG. 1, the print server 24 is provided for printing control, but in FIG. 2, the printer 23 has the function of the print server 24 shown in FIG. FIG.

  FIG. 3 is a block diagram showing the configuration of the print server of the present invention.

  The print server shown in FIG. 3 includes a communication unit 301, a control unit 302, a storage unit 303, a status confirmation unit 304, an address control unit 305, a management unit 306, an output control unit 307, and a U / I 308. It is a network for making a call request by a telephone and installed in an information providing destination network that receives digital information to be shared.

  When a printer status confirmation request from the gateway device is received by the communication unit 301 serving as a communication interface, the status confirmation unit 304 responds with the status of the printer being monitored via the control unit 302. The status confirmation unit 304 monitors the operation state of the connected printer at regular intervals via the communication unit 301, and notifies the fact using the U / I 308 when an abnormality occurs in the printer.

  When the communication unit 301 accepts the IP address of the client PC of the information providing source network, the communication unit 301 notifies the control unit 302 and instructs the address control unit 305 to register the IP address. The address control unit 305 registers the IP address in the management unit 306 in association with the received gateway device of the information providing source network based on the IP address registration instruction from the control unit.

  In other words, the management unit 306 manages the IP address of the client PC having digital information shared by each network gateway device. The management state of the IP address managed at this time is shown in FIG.

  FIG. 4 shows an address list composed of a “(destination) gateway device IP address” column (401) and a “print permission IP address” column (402). The “address” column (401) shows the IP address of the gateway device of the network where the voice session is established, and the “print permitted IP address” column (402) shows the IP address of the device permitted to print.

  Only print data from the apparatus having the IP address registered in the “print-permitted IP address” column (402) is permitted to be printed. Incidentally, this address list is automatically deleted when the voice session is disconnected.

  As a result, only a print request from a specific apparatus can be printed out by the printer.

  When the communication unit 301 in FIG. 3 accepts the print request, the communication unit 301 notifies the control unit 302 that the print request has been accepted, and the control unit 302 stores the print data corresponding to the print request in the storage unit 303 and to that effect. To the address control unit 305. At this time, the address control unit 305 analyzes the IP address of the print request source specified in the print data corresponding to the print request stored in the storage unit 303. Then, it is determined whether or not the analyzed IP address is managed by the management unit 306 as an IP address for the gateway device in a call state.

  The address control unit 305 that has determined that the management unit 306 is managing the IP address of the print request source notifies the control unit 302 to that effect. Further, the control unit 302 sends a print request for the print data to the output control unit 307, and the output control unit 307 transfers the print job to the printer via the communication unit 301.

  When the control unit 302 receives via the communication unit 301 that the print job transferred to the printer has been normally printed out by the printer, the control unit 302 creates a print completion notification indicating that fact and sends it to the client PC. To do.

  When disconnection information is notified from the gateway device via the communication unit 301, the control unit 302 instructs the address control unit 305 to delete the IP address of the gateway device included in the disconnection information from the list. The address control unit 305 deletes the IP address managed by the management unit 306 based on the contents of the instruction.

  The U / I 309 is a user interface such as a display display, a keyboard, a pointing device, and a touch panel. The U / I 309 displays various information, and the user can use the U / I 309 to instruct processing.

  With this configuration, the print server can print out only a print request having an IP address that matches the registered IP address.

  FIG. 5 is a sequence diagram showing the flow of the entire process in the information providing system of the present invention.

  In FIG. 5, the IP phone of the information providing source network is called using the IP phone of the information providing destination network (501). By this call, the gateway device of the information providing destination network transmits a status confirmation request for confirming the printer status to the print server (502), and receives a status confirmation response indicating the printer status from the print server (503). ). In the print server, the operating state of the printer is always confirmed.

  When the gateway device of the information providing destination network confirms the status of the printer in the network and a call response is made by the IP telephone (504), a voice session is established between the mutual networks.

  With the voice session established, the gateway device of the information providing destination network requests the information providing source network for the IP address of the device that manages the digital information (in this embodiment, “client PC” is indicated) (505). ). The gateway device of the information providing source network that has received the request for the IP address performs a disclosure confirmation process for confirming whether the IP address of the client PC of the network can be disclosed in response to the request (506).

  In this disclosure confirmation processing, the request source of the IP address of the client PC is identified, that is, it is identified whether the request is made from the gateway device of the network where the voice session is established. When it is confirmed that the request source is a gateway device of the network in which the session is established, a response permitting notification of the IP address (also referred to as “permission response”) is returned (507).

  On the other hand, if it cannot be confirmed that the request source of the IP address is a gateway device of the network where the session is established, a response (also referred to as “rejection response”) that cannot notify the IP address is returned (507). ). When this rejection response is returned, the process for establishing the data session in information sharing is stopped.

  Through the processing from (505) to (507), it is possible to confirm whether information sharing processing using this system is possible, and confirm that it is possible when a permission response is received by the gateway device of the information providing destination network. it can.

  The gateway device of the information providing destination network that has received the permission response then notifies the gateway device of the information providing source network of the IP address of the print server and printer connected to the network (508). Upon receiving this notification, the gateway device of the information providing source network returns the IP address of the client PC that manages the digital information shared in the network (509). At the same time, the gateway device of the information providing source network notifies the client PC of the received IP address of the print server and printer (510).

  Upon receiving the IP address of the client PC notified from the gateway device of the information providing source network, the gateway device of the information providing destination network notifies the print server of the IP address (512).

  As a result, a data session is established between the print server of the information providing destination network and the client PC of the information providing source network.

  In this state, the print server of the information providing destination network registers the notified IP address in association with the IP address of the gateway device of the received network (513). An example of this association is shown in FIG.

  When a print request is received with the received IP address of the client PC registered (514), an address confirmation process is performed to confirm the print request source IP address indicated in the print data corresponding to the received print request (515). . A detailed flow of this address confirmation processing is shown in the flowchart of FIG.

  If the print request source IP address matches the registered IP address, a print request is made to the printer (516).

  The printer that has received the print request performs a print output process and outputs a print document (517). When printing is completed normally, a completion notification is transmitted to the print server (518), and the print server transmits a print completion notification to the client PC of the information providing source network that is the print request source (519).

  As a result, information sharing is performed between the network and the other party with whom a voice session has been established.

  When the call is disconnected from the IP phone of the information providing source network or the information providing destination network (FIG. 5 shows an example in which the call is disconnected from the IP phone of the information providing source network), the gateway of the information providing destination network The apparatus transmits disconnection information to the print server in the network (521). The print server that has received the cutting information performs a cutting process. A detailed flow of this cutting process is shown in the flowchart of FIG.

  Incidentally, when the call is disconnected from the IP telephone of the information providing source network, a disconnection request is made to the gateway device of the information providing destination network (520), and the gateway device that has received this disconnection request sends the disconnection information to the print server. Will be.

  According to the sequence diagram shown above, data communication can be performed only with a partner who has established a voice session by voice call.

  FIG. 6 is a flowchart showing processing in the gateway device of the information providing destination network of the present invention.

  In FIG. 6, the gateway device of the information providing destination network makes a call using an IP telephone. In a state where a voice session is established for a call by the IP telephone, an IP address of a device (client PC) that manages digital information to be shared is requested to the gateway device of the information providing source network (601).

  In response to the IP address acquisition request, it is determined whether a permission response is returned from the gateway device of the information providing source network (602). If a rejection response is received instead of a permission response (NO in 602), that is, if the notification of the IP address is rejected in the information providing source network, the processing in information sharing is stopped.

  On the other hand, when the permission response is received (YES in 602), the IP addresses of the printer and the print server are notified to the gateway device of the network where the voice session is established (603). On the other hand, when the gateway device of the information providing source network transmits the IP address of the client PC and receives the IP address at the gateway device of the information providing destination network (604), the received IP address is transferred to the print server. (605). In the print server, the IP address of the client PC for the gateway device of the received information providing source network is registered.

  When print data is received from the gateway device of the information providing source network (606), the print data is transferred to the print server (607). When the disconnection of the voice session by the IP telephone is instructed after the print output is completed by the printer, a process for disconnecting the voice session between the networks is performed (608), and the disconnect information is notified to the print server (609).

  By such processing, the gateway device can acquire the IP address of the client PC that holds the digital information.

  FIG. 7 is a flowchart showing confirmation processing in the print server of the present invention.

  In FIG. 7, this confirmation process is started when a print request for print data is received from the gateway device, and the print data requested to be printed is analyzed to identify the IP address of the print request source (701). The identified IP address is confirmed on the registered list (702).

  It is determined whether the IP address is registered on the list (703), and if it is registered (YES in 703), the print data is transferred to the connected printer (704).

  On the other hand, if the specified IP address of the print request source is not registered on the list (NO in 703), the print processing for information sharing is stopped (705), and the print processing is stopped. Is displayed on the print server or printer (706).

  By such processing, only print data from the print request source registered on the list can be printed out.

  FIG. 8 is a flowchart showing a disconnection process in the print server of the present invention.

  In FIG. 8, this disconnection process is a process performed by disconnecting a call by an IP telephone. The disconnection process is started when a disconnection request is received from the gateway device of the information providing destination network, and is included in the disconnection request. The disconnect information is received (801).

  The received cutting information is expanded to enable processing on the cutting information (802). Based on the disconnection information, the list of IP addresses for the designated gateway device is deleted (803).

  As a result, the IP address of the connection partner of the session can be erased simultaneously with the release of the voice session, and unnecessary printout can be prevented.

  A modification of the first embodiment will be described with reference to FIGS. 9 to 11.

  FIG. 9 is a sequence diagram showing another example of a sequence diagram showing the overall flow of processing in the information providing system of the present invention shown in FIG.

  In the sequence diagram shown in FIG. 5, the configuration is such that the IP address of the client PC that manages the digital information shared from the information provider network is received and registered. In the sequence diagram shown in FIG. The flow shows that the line efficiency of the access line is improved by reusing the registered IP address.

  Since FIG. 9 is a modification of the sequence diagram shown in FIG. 5, different points will be mainly described.

  Manages digital information for the gateway device of the network (information providing source network) where the gateway device of the information receiving network (information providing destination network) provides information in a state where the voice session using the IP telephone is established The client PC requests the IP address of the client PC (505). In response to the request, a disclosure confirmation process is performed in the gateway device of the information providing source network (506), and an authorization response or IP address disclosure responding that the IP address of the client PC may be disclosed as a response is issued. One of the rejection responses to be rejected is received by the gateway device of the information providing destination network (507).

  When receiving the permission response, the gateway device of the information providing destination network transfers the permission response to the print server of the network (901). Upon receiving the permission response, the print server analyzes the permission response and identifies the IP address of the gateway device of the transmission source information provider network. Registration confirmation processing for confirming whether the IP address is registered in the list as shown in FIG. 10 is performed (902). The detailed processing flow of this registration confirmation processing is shown in the flowchart of FIG.

  Incidentally, the sequence diagram shown in FIG. 9 shows a flow in the case where the IP address of the gateway device of the information providing source network is registered in the list by the registration confirmation process, but if it is not registered, the shared digital information Processing for requesting the IP address of the client PC of the information providing source network that manages the information is performed (not shown).

  If registered in the list, a data session is established between the mutual networks at this point, and data communication is possible.

  As a result, a print request from a client PC of the information providing source network can be accepted, and thereafter, processing as shown in the sequence diagram of FIG. 5 is performed, and information can be shared between the mutual networks.

  FIG. 10 is a diagram showing a modification of the IP address list showing a list of IP addresses permitted for printing shown in FIG.

  10 is an IP address list in which the “status” column (1001) is added to the list of print-permitted IP addresses for the IP address of the destination gateway device in FIG. 4, and information is provided as in the IP address list shown in FIG. Managed by the print server in the destination network.

  This “status” column (1001) sets whether the IP address registered in the “print permitted IP address” column (402) is valid or invalid between the networks in which the voice session and the data session are established. If the column is [active], the IP address in the “print permitted IP address” column (402) is validated. If [Non_active] is indicated, “print” The IP address in the “permitted IP address” column (402) is invalidated.

  In FIG. 10, “active” is set in the “status” column of the record in which the value of the “(destination) gateway device IP address” column (401) is “IP address of gateway device (1)”. In addition, [Non_active] is displayed in the “status” column of the record in which the value of the “(destination) gateway device IP address” column (401) is “IP address of gateway device (2)”. The set state is shown.

  That is, the IP address of the client PC indicated as the print permission IP address for the IP address (1) of the gateway device is valid.

  The print-permitted IP address for the gateway device may be configured to be deleted when a certain time has elapsed.

  FIG. 11 is a flowchart showing a detailed processing flow of the registration confirmation processing shown in the sequence diagram of FIG.

  The registration confirmation process shown in FIG. 11 is a flow executed by the print server of the information providing destination network when a permission response is transmitted from the gateway device of the information providing source network. By analyzing the response, the IP address of the gateway device of the transmission source is specified (1101).

  It is confirmed whether a list of print-permitted IP addresses for the identified IP address of the gateway device is registered in the IP address list table as shown in FIG. 10 (1102), and it is determined whether it has been registered (1103). In this determination processing, it is determined whether the analyzed IP address of the gateway device is registered in the “IP address of gateway device (destination)” column shown in FIG.

  If it is determined by this determination processing that registration has been completed (YES in 1103), the “status” column of the print-permitted IP address for the IP address of the gateway device is updated to [active] (1104). That is, it is possible to receive data from a device having a print permission IP address.

  On the other hand, if the IP address of the analyzed gateway device is not registered (NO in 1103), the client PC that manages the digital information shared between the mutual networks with respect to the gateway device that is the transmission source of the permission response. An IP address is requested (1105). As a response, the received IP address of the client PC is registered in a list as shown in FIG. 10, and the “status” column is updated to “active” (1106). This makes it possible to receive digital information sent from the registered client PC.

  Incidentally, the sequence shown in FIG. 9 shows a flow when the IP address of the gateway device that is the transmission source of the permission response is registered in the flow of the registration confirmation process as described above.

  Note that the list of print-permitted IP addresses as shown in FIG. 10 may be configured to update the information of the IP address when a certain time elapses, or the certain time elapses. The IP address may be deleted from the list. Thus, the latest IP address can be held and access efficiency is improved.

  In the processing shown in the second embodiment, the line efficiency is improved as compared with the processing in the first embodiment, and information can be shared more easily.

  With the configuration and processing as described in the first embodiment or the second embodiment, the information sharing system of the present invention can perform data communication only with a partner who has established a voice session by voice call. Only print requests from specific devices in the established partner network can be processed.

  Thus, it is possible to process a print request from a specific apparatus in a state where a voice session is established, and to prevent receiving unauthorized information from an unintended partner.

  Therefore, by applying the present invention, it can be expected that information can be shared between the mutual networks by data communication ensuring high safety.

  The present invention is not limited to the embodiments described above and shown in the drawings, and can be implemented with appropriate modifications within a range not changing the gist thereof.

  INDUSTRIAL APPLICABILITY The present invention is applicable to an information sharing system that shares information between mutual networks. In particular, high security can be achieved by performing print output only in response to a print request from a client PC in a network in which a voice session is established. This is useful for sharing information while ensuring

The figure which shows the network structure in the information provision system of this invention. The other figure which shows the network structure in the information provision system of this invention. FIG. 2 is a block diagram illustrating a configuration of a print server according to the present invention. The figure which shows the list of the IP address managed by the print server of this invention. The sequence diagram which shows the flow of the whole process in the information provision system of this invention. The flowchart which shows the process in the gateway apparatus of this invention. 6 is a flowchart showing confirmation processing in the print server of the present invention. 6 is a flowchart showing a disconnection process in the print server of the present invention. The sequence diagram which showed the other example of the sequence diagram which shows the flow of the whole process in the information provision system of this invention shown in FIG. FIG. 5 is a view showing a modification of the IP address list showing a list of IP addresses permitted to print shown in FIG. 4. 10 is a flowchart showing a detailed processing flow of registration confirmation processing shown in the sequence diagram of FIG. 9.

Explanation of symbols

10 Information Provider Network 11 Gateway Device 12 IP Phone 13 Client PC
DESCRIPTION OF SYMBOLS 20 Information provision destination network 21 Gateway apparatus 22 IP telephone 23 Print server 24 Printer 301 Communication part 302 Control part 303 Storage part 304 Status confirmation part 305 Address control part 306 Management part 307 Output control part

Claims (6)

In an information sharing system that establishes a call session between telephones provided at each point, and shares digital information through digital communication between gateway devices at the point where the call session is established,
Request means for requesting the network identification information of the management device to the destination of the point having the management device that manages the digital information;
Registration means for receiving the network identification information of the management apparatus from the counterpart requested by the request means, and registering the network identification information in association with the network identification information of the gateway apparatus of the counterpart having the management apparatus;
Accepting means for accepting the processing request for the digital information from the management apparatus of the other party that made the request for the network identification information by the requesting means;
Confirmation means for confirming whether the network identification information of the request source included in the processing request received by the reception means matches the network identification information of the management device registered by the registration means, and
The information sharing system, wherein the digital information is shared between each point when it is confirmed that the network identification information registered by the confirmation unit is matched. A telephone session provided at each point establishes a call session, and the gateway device at the point where the call session is established performs digital communication to receive digital information from the other party, and the digital information is imaged by the image forming apparatus. In the information sharing system shared by forming,
The gateway device is
Request means for requesting the network identification information of the management device to the destination of the point having the management device that manages the digital information;
Registration means for registering the network identification information of the management apparatus received from the counterpart by the request by the request means in association with the network identification information of the gateway apparatus of the counterpart;
An accepting means for accepting an image formation request for the digital information from a management apparatus of a counterpart who has requested network identification information by the requesting means;
Confirmation means for confirming whether the network identification information of the request source included in the image formation request received by the reception means matches the network identification information of the management apparatus registered by the registration means;
Transfer means for transferring the digital information to the image forming apparatus when it can be confirmed that it matches the network identification information registered by the confirmation means,
The image forming apparatus includes:
An information sharing system for performing image formation of the digital information transferred by the transfer means. Further comprising valid / invalid setting means for validating and invalidating the confirmation of the request source by the confirmation means using the network identification information of the management device registered by the registration means,
The confirmation means includes
2. The network identification information of the processing request accepted by the accepting means is checked if it matches with the network identification information registered by the registration means when the setting means is set to be valid. Or the information sharing system of 2. 3. The information sharing system according to claim 1, further comprising: an erasure unit that erases the network identification information of the management apparatus registered by the registration unit together with the disconnection of the call session. The information according to any one of claims 1 to 3, wherein the network identification information of the management device registered by the registration unit is set to be invalid by the setting unit by disconnecting the call session using the telephone. Shared system. In the information sharing method of establishing a call session between telephones provided at each point and sharing digital information by digitally communicating between the gateway devices at the point where the call session is established,
Requesting the network identification information of the management device by the request means in the gateway device to the destination of the point having the management device that manages the digital information,
Receiving network identification information of the management apparatus from the counterpart requested by the request means, registering the network identification information in association with the network identification information of the gateway apparatus of the counterpart having the management apparatus,
Accepting the digital information processing request by the accepting means from the management apparatus of the other party that made the request for the network identification information by the requesting means,
Confirming by the confirming means whether the network identification information of the request source included in the processing request received by the accepting means matches the network identification information of the management device registered by the registering means,
The digital information is shared between points when it is confirmed that the network identification information registered by the confirmation means matches.

Images